Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier: 0qVsAYuAoaEvJakFQT+Eq9wh/CHirosUx3JDV7Ccwwk=
Subject key identifier: AA:8D:DC:05:B0:F8:08:37:64:A6:41:68:02:8B:DC:9D:63:F9:55:F9
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 019921B075F871377EC723800EFD6BD874A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number: 08B8
Signing time: Sun 07 Sep 2025 01:00:36 +0000
Manifest this update: Sun 07 Sep 2025 01:00:36 +0000
Manifest next update: Mon 08 Sep 2025 01:00:36 +0000
Files and hashes: 1: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: b4uMugwpzQVb+szXJGUnyALpR13bA7cdbiW7brFFGv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:75:f8:71:37:7e:c7:23:80:0e:fd:6b:d8:74:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Sep 7 01:00:36 2025 GMT
Not After : Sep 8 01:00:36 2025 GMT
Subject: CN=aa8ddc05b0f8083764a64168028bdc9d63f955f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:09:28:a7:70:91:8e:4d:b6:8b:58:0e:d2:
83:9e:17:fb:8d:74:5e:af:a9:f4:81:7c:62:16:08:
2b:01:a5:fa:e7:12:29:c8:3c:2e:fd:27:39:77:10:
26:33:f3:3f:7a:41:5d:89:a3:d7:ff:63:99:4a:c8:
9d:6c:16:38:c1:bc:19:17:10:c5:98:1a:af:2b:ce:
03:46:ab:0b:85:e4:46:4a:da:fb:24:14:d2:45:44:
d2:d2:da:45:98:e6:ca:ac:2c:9a:13:b4:5c:8f:c7:
68:23:b7:c6:83:c4:a4:1a:2d:15:96:27:ca:25:2e:
bc:a2:ba:b1:a1:eb:c7:28:46:d4:21:83:84:dc:fa:
f3:9a:70:b6:7b:98:a8:55:82:8f:3b:e9:8a:15:80:
df:5e:9f:da:f7:45:e1:f8:76:01:8c:ab:df:ff:6c:
b0:a6:56:3b:ff:2b:94:86:fb:0d:d5:92:39:2a:5b:
38:0d:8c:cb:9e:9c:55:5e:9d:17:c9:4c:dd:15:09:
fb:2c:83:9a:cc:21:2c:86:ed:fd:07:2a:ec:00:ff:
42:42:88:79:99:21:ce:26:58:02:04:6a:51:19:88:
90:1d:c2:af:95:d9:f9:3b:8d:5c:80:5d:c1:e4:b9:
6f:c8:1b:e1:3a:87:8c:f6:25:35:58:68:38:18:8c:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8D:DC:05:B0:F8:08:37:64:A6:41:68:02:8B:DC:9D:63:F9:55:F9
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:61:7d:44:47:bb:46:3d:26:27:59:ff:c1:56:3a:d9:84:35:
5f:68:ee:d9:e7:86:0d:07:ba:21:f9:77:2f:b7:a3:c4:9c:7d:
a9:d9:66:8b:79:5f:cb:76:c0:64:82:81:d6:58:98:46:11:ed:
f4:07:94:90:a6:b9:53:d5:3e:e9:8d:74:03:c0:83:3c:5b:3e:
1b:2e:c4:f4:da:6a:13:1e:a9:53:16:60:d8:0e:86:20:ae:a1:
31:ee:bc:ef:4e:19:06:c4:39:e1:86:04:b0:ed:e2:f0:97:ab:
57:e4:b2:2a:83:da:66:3d:bc:ff:0d:a3:23:15:1e:2c:cc:51:
f4:6d:c4:94:cf:b7:ab:34:e7:dd:46:6b:ac:34:33:83:fe:21:
48:c7:91:cc:b2:19:7f:d9:8a:36:de:e2:a8:ba:a9:0d:58:e5:
3d:fe:cc:b0:0b:c2:f6:75:85:2b:e7:39:28:59:ce:18:b2:96:
d2:bb:67:d4:19:5c:ae:60:c5:4c:ae:98:67:8f:6e:55:27:64:
05:8d:0b:a2:ba:e4:24:30:f8:91:53:3d:1d:a0:d1:8d:27:94:
ca:93:3a:2c:11:92:c0:ec:6a:17:2b:a7:52:03:cb:91:72:3c:
28:67:1d:01:62:37:66:a0:a2:3f:ee:75:f8:b4:60:77:c3:56:
3c:88:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:35 2025 by rpki-client